Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/cb16cb14-014b-3f5d-b3e7-7671f3b2bcd1.roa
File:                     cb16cb14-014b-3f5d-b3e7-7671f3b2bcd1.roa (raw, json)
Hash identifier:          GlRrJTkWSyDQ6RvKEQlOwLwaXOMQqd1k3GPytrhEM50=
Subject key identifier:   74:2A:A4:B5:EA:AF:49:3B:C1:06:EA:EC:67:40:95:77:2C:09:53:42
Certificate issuer:       /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial:       010D0C9F4328584E858F8DF7BC30B351B1CC5114
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/cb16cb14-014b-3f5d-b3e7-7671f3b2bcd1.roa
Signing time:             Thu 16 Jul 2026 21:00:12 +0000
ROA not before:           Thu 16 Jul 2026 21:00:12 +0000
ROA not after:            Wed 14 Oct 2026 21:00:12 +0000
asID:                     13213
IP address blocks:        2604:c980:5400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:85:8f:8d:f7:bc:30:b3:51:b1:cc:51:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
        Validity
            Not Before: Jul 16 21:00:12 2026 GMT
            Not After : Oct 14 21:00:12 2026 GMT
        Subject: CN=c6c51576-8993-47f6-b3a0-0d9045f76fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:47:84:aa:67:85:f2:8e:2d:61:51:ba:04:1c:
                    55:e1:75:71:2e:75:85:c0:d0:40:19:90:2e:ec:f2:
                    af:83:9f:a3:20:40:63:c5:53:83:09:3f:c0:7e:a7:
                    23:df:4f:f2:8f:29:87:86:06:5d:22:9e:40:61:78:
                    ba:bd:4c:e9:e7:36:3d:51:ab:ab:f0:00:52:3b:88:
                    a5:18:b0:3c:ce:2b:7f:41:77:52:af:58:bf:1b:a5:
                    b8:42:64:2b:55:c5:26:16:97:7a:cc:d6:7a:c3:9c:
                    4e:d6:26:69:89:a0:cd:48:39:67:c4:f9:09:c4:5d:
                    c2:8d:80:25:50:19:e2:22:51:11:f9:6e:4f:f8:3f:
                    f7:b3:d3:3e:63:22:83:9d:2d:65:36:22:3e:d2:9a:
                    e5:1c:f9:3f:b0:8b:67:f0:7c:4d:09:f0:0f:b8:03:
                    4e:10:e8:ce:43:d6:07:2a:3d:a6:36:1c:fa:63:31:
                    03:cf:36:fe:a8:9d:80:0b:6e:21:83:2f:32:ae:3d:
                    b4:3b:f5:4e:3c:a7:f6:0f:a3:2a:79:9f:ff:4e:f6:
                    b1:f2:cc:79:1d:d7:68:04:14:7f:24:45:0e:48:32:
                    73:f8:66:db:7b:fc:d5:24:42:4d:2a:8f:87:de:71:
                    23:b2:68:0e:1c:71:e6:96:c7:2b:36:16:9f:c1:cc:
                    37:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2A:A4:B5:EA:AF:49:3B:C1:06:EA:EC:67:40:95:77:2C:09:53:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/cb16cb14-014b-3f5d-b3e7-7671f3b2bcd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl

            X509v3 Authority Key Identifier:
                keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:c980:5400::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:40:db:7c:50:1f:b6:27:c8:d6:85:93:ef:0f:8c:3e:92:f1:
         d3:e4:82:c0:9c:8c:e4:ae:f0:d0:dc:b5:3b:bc:2b:c9:e3:5f:
         19:0b:b8:ca:52:0e:8b:93:65:23:5c:77:81:e5:e0:d3:d4:8b:
         c8:9b:aa:04:33:4c:bc:2e:11:2b:e7:e5:31:1c:c1:5d:ee:2b:
         18:8e:76:2b:1a:bd:e6:bd:20:d8:75:38:6d:2c:31:a6:95:ea:
         f7:90:5f:bb:e4:8e:fa:c5:fd:c8:09:42:77:e9:d7:33:4c:48:
         91:45:3b:21:dd:b0:9e:e6:05:c3:b2:0e:ff:fc:33:04:33:95:
         5e:57:01:d6:a0:54:fa:f3:02:be:77:2c:70:c1:ae:05:c8:02:
         0f:f6:57:ab:6d:bd:17:68:f2:0e:65:24:36:71:d9:57:09:db:
         8c:b9:ec:c3:48:45:3a:7c:61:73:a4:be:46:fa:c6:34:5f:e6:
         0e:14:e3:52:b3:78:3b:42:b1:ea:b0:9d:5e:6c:c0:12:53:ba:
         3c:b3:b6:68:a0:2c:e7:70:6b:3f:c0:2f:80:21:78:ae:dd:bc:
         63:21:69:82:e6:3a:bf:50:c8:0b:e6:dc:0e:94:f5:1d:78:fd:
         2a:c8:16:e3:66:e5:6a:f7:0b:e6:69:b4:fb:18:f5:88:ba:47:
         92:bf:27:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:34:04 2026 by rpki-client